Reputation
2,880
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
2 12 23
Newest
 Nice Answer
Impact
~180k people reached

Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
I dislike the change-HREF-when-clicked but I disagree about Google trying to hide the fact that selected linked are logged: I have a Google account, and under Search history I can see 1) the searches I have made, 2) the websites I have visited by clicking on Google search results. (I wished Google used the PING feature to collect this data, and not mess with URLs, and I wish browser would show PING requests in some way.) You have to remember that when you have JS on, everything you type or click on a website can be logged by the website, including form data when you do not "submit".
Jun
2
reviewed Approve How can I generate custom brute-force dictionaries?
May
26
reviewed Approve What is blind injection and how to simulate the issue?
May
26
reviewed Approve What is blind injection and how to simulate the issue?
May
25
awarded  Enlightened
May
25
awarded  Nice Answer
Apr
24
reviewed Reject Load balancer and two machines - how many SSL certificates do I need?
Apr
17
reviewed Approve What makes it illegal to use the information learned by exploiting a bug?
Apr
15
reviewed Approve Are there “secure” languages?
Mar
22
awarded  Necromancer
Mar
11
awarded  Excavator
Mar
11
revised Does “late launch”/“dynamic chain of trust” allow remote attestation?
spelling
Mar
9
reviewed Approve Is Adblock (Plus) a security risk?
Mar
7
comment Should websites be allowed to disable autocomplete on forms or fields?
1. Some computers get stolen on a daisy. These should have adequate passphrase protection. 2. A CEO is not a system admin and breaking into his account should not have any notable security impact for the information system.
Mar
2
comment Is Adblock (Plus) a security risk?
How many people use Adblock* with EasyList and no other filters?
Feb
28
reviewed Approve How weak is MD5 as a password hashing function ?
Feb
28
comment Is Adblock (Plus) a security risk?
@Superbest "It's not "some random German company"." But ADB is known worldwide (like Google). A scandal involving ADB would be great news for the world.
Feb
28
comment How weak is MD5 as a password hashing function ?
There is no known way to efficiently recover x from MD5(x).
Feb
25
comment How big is the threat of Desktop Linux malware?
Un*x/linux is horrible from a security POV. But Windows is worse. Also, nix has many stupid admins, but Windows usually comes with an inane user who sees himself as a know-it-all because he can do a couple of simple tasks. GNU/linux distros come with lots of software to do many basic tasks. Windows computer often don't. Also, most malware just aren't ported to linux.
Feb
24
comment How big is the threat of Desktop Linux malware?
"For a long time, Microsoft didn't enumerate what extensions made a file executable," True; I bet very few people can enumerate these from the top of their mind (I sure can't). The extension hiding thing is perhaps the most notable misfeature of Windows.